CVE-2019-11686: Westerndigital Sandisk x300 SD7SB6S-128g Firmware

Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days.

Western Digital SanDisk X300, X300s, X400, and X600 devices: A vulnerability in the wear-leveling algorithm of the drive may cause cryptographically sensitive parameters (such as data encryption keys) to remain on the drive media after their intended erasure.

Affected products

  • Westerndigital Sandisk x300 SD7SB6S-128g Firmware: affected versions not specified
  • Westerndigital Sandisk x300 SD7SB6S-256g Firmware: affected versions not specified
  • Westerndigital Sandisk x300 SD7SB7S-010t Firmware: affected versions not specified
  • Westerndigital Sandisk x300 SD7SB7S-512g Firmware: affected versions not specified
  • Westerndigital Sandisk x300 SD7SF6S-128g Firmware: affected versions not specified
  • Westerndigital Sandisk x300 SD7SF6S-256g Firmware: affected versions not specified
  • Westerndigital Sandisk x300 SD7SF6S-512g Firmware: affected versions not specified
  • Westerndigital Sandisk x300 SD7SN6S-128g Firmware: affected versions not specified
  • Westerndigital Sandisk x300 SD7SN6S-256g Firmware: affected versions not specified
  • Westerndigital Sandisk x300 SD7SN6S-512g Firmware: affected versions not specified
  • Westerndigital Sandisk x300s SD7SB3Q-064g Firmware: affected versions not specified
  • Westerndigital Sandisk x300s SD7SN3Q-064g Firmware: affected versions not specified
  • Westerndigital Sandisk x300s SD7UB2Q-010t Firmware: affected versions not specified
  • Westerndigital Sandisk x300s SD7UB2Q-512g Firmware: affected versions not specified
  • Westerndigital Sandisk x300s SD7UB3Q-128g Firmware: affected versions not specified
  • Westerndigital Sandisk x300s SD7UB3Q-256g Firmware: affected versions not specified
  • Westerndigital Sandisk x300s SD7UN3Q-128g Firmware: affected versions not specified
  • Westerndigital Sandisk x300s SD7UN3Q-256g Firmware: affected versions not specified
  • Westerndigital Sandisk x300s SD7UN3Q-512g Firmware: affected versions not specified
  • Westerndigital Sandisk x400 SD8SB8U-128g-1122 Firmware: affected versions not specified
  • Westerndigital Sandisk x400 SD8SB8U-128g Firmware: affected versions not specified
  • Westerndigital Sandisk x400 SD8SB8U-1t00-1122 Firmware: affected versions not specified
  • Westerndigital Sandisk x400 SD8SB8U-1t00 Firmware: affected versions not specified
  • Westerndigital Sandisk x400 SD8SB8U-256g-1122 Firmware: affected versions not specified
  • Westerndigital Sandisk x400 SD8SB8U-256g Firmware: affected versions not specified
  • and 34 more

Published 2020-03-10. Last modified 2026-06-17.